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Abstract — The MIMOME channel is a Gaussian wiretap 
channel in which the sender, receiver, and eavesdropper all have 
multiple antennas. We characterize the secrecy capacity as the 
saddle-value of a minimax problem. Among other implications, 
our result establishes that a Gaussian distribution maximizes 
the secrecy capacity characterization of Csiszar and Korner 
when applied to the MIMOME channel. We also determine a 
necessary and sufficient condition for the secrecy capacity to 
be zero. Large antenna array analysis of this condition reveals 
several useful insights into the conditions under which secure 
communication is possible. 

I. Introduction 

Multiple antennas are a valuable resource in wireless com- 
munications. Recently there has been a significant activity 
in exploring both the theoretical and practical aspects of 
wireless systems with multiple antennas. In this work we 
explore the role of multiple antennas for physical layer 
security, which is an emerging area of interest. 

The wiretap channel [1] is an information theoretic model 
for physical layer security. The setup has three terminals — 
one sender, one receiver and one eavesdropper. The goal is 
to exploit the structure of the underlying broadcast channel 
to transmit a message reliably to the intended receiver, while 
leaking asymptotically no information to the eavesdropper. 
A single letter characterization of the secrecy capacity, when 
the underlying channel is a discrete memoryless broadcast 
channel, has been obtained by Csiszar and Korner [2]. An 
explicit solution for the scalar Gaussian case is obtained 
in [3]. 

In this paper we consider the case where all the three 
terminals have multiple antennas and naturally refer to it as 
multiple input, multiple output, multiple eavesdropper (MI- 
MOME) channel. In this setup we assume that the channel 
matrices are fixed and known to all the three terminals. While 
the assumption that the eavesdropper's channel is known 
to both the sender and the receiver is obviously a strong 
assumption, we remark in advance that our solution provides 
ultimate limits on secure transmission with multiple antennas 
and could be a starting point for other formulations where 
the eavesdropper's channel may not be known to the sender 
and the receiver. 

The main result of this paper is a characterization of the 
secrecy capacity of the MIMOME channel as the saddle 
value of a minimax problem. Our approach does not rely 
on the Csiszar and Korner capacity expression, but instead 
is based on the technique used in characterizing the sum 
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rate of the MIMO broadcast channel (see, e.g., [4] and its 
references). We first develop a minimax expression that upper 
bounds the secrecy capacity and subsequently establish the 
tightness of this bound for the MIMOME channel. 

The case where the channel matrices of intended receiver 
and eavesdropper are square and diagonal follows from the 
results in [5]-[8] that consider secure transmission over 
fading channels. The difficulty of optimizing the Csiszar and 
Korner expression for the general case has been reported 
in [9]— [ 11] and achievable rates have been investigated. The 
approach used in the present paper has been used in our 
earlier work [12], [13] to establish the secrecy capacity for 
two special cases: the case when the intended receiver has a 
single antenna (MISOME case) and the MIMOME secrecy 
capacity in the high SNR regime. This upper bounding 
approach was independently conceived by Ulukus et. al. [14] 
and further applied to the 2x2x1 case [15]. Finally, a related 
approach for the MIMOME channel, is developed indepen- 
dently in [16]. Also it is interesting to note that this upper 
bounding approach has been empirically observed to be tight 
for the problem of broadcasting two private messages to two 
receivers when each receiver has a single antenna [17]. For 
this setup a single letter characterization is not known for 
the discrete memoryless case [18], [19] 

II. Channel Model 

We denote the number of antennas at the sender, the 
receiver and the eavesdropper by n t , n r and n c respectively. 

y r (t) = H r x(t) + z r (t) 
y e (i) = H c x(i)+z„(i), 



(1) 



where H r 6 C n 



and H G 



are channel 



matrices associated with the receiver and the eavesdropper. 
The channel matrices are fixed for the entire transmission 
period and known to all the three terminals. The additive 
noise z r (t) and z e (i) are circularly-symmetric and complex- 
valued Gaussian random variables. The input satisfies a 
power constraint E [i £" =1 ||x(t)|| 2 ] < P. 

A rate R is achievable if there exists a sequence of length n 
codes, such that the error probability at the intended receiver 
and —I(w; y™ ) both approach zero as n — ► oo. The secrecy 
capacity is the supremum of all achievable rates. 

III. MIMOME Secrecy Capacity 

Our main result is the following characterization of the 
secrecy capacity of the MIMOME wiretap channel. 

Theorem 1: The secrecy capacity of the MIMOME wire- 
tap channel is 

C = 



min max i? + (Kp,K$), 



(2) 



where i?+(K P ,K*) = J(x;y r | y c ) with x ~ 6^(0, K P ) 
and 

3Cp = |k p Kp^O, tr(K P )<p|, (3) 
and where [zj,z|]t ~ CK(0,K*), with 



OC* = <^ K<] 



K # = 



CT maX (*) < 1 



(4) 



Furthermore^ the minimax problem in (|2]i has a saddle point 
solution (Kp,K$) and the secrecy capacity can also be 
expressed as, 

det(I + H r K P Hj) 



C = fl+(K P ,K*) = log 



det(I + H c K P Hj) 



(5) 



A. Connection with Csiszdr and Korner Capacity 

A characterization of the secrecy capacity for the non- 
degraded discrete memoryless broadcast channel p yr . yc \ x is 
provided by Csiszar and Korner [2], 



C = max I(u;y T ) — I(u;y e 

Pu,Px\u 



(6) 



where u is an auxiliary random variable (over a certain 
alphabet with bounded cardinality) that satisfies u — > x — > 
(y r ,y ). As remarked in [2], the secrecy capacity (O can 
be extended in principle to incorporate continuous-valued 
inputs. However, directly identifying the optimal u for the 
MIMOME case is not straightforward. 

Theorem [T] indirectly establishes an optimal choice of u 
in ©. Suppose that (Kp,K$) is a saddle point solution to 
the minimax problem in From (0 we have 



where 



i? + (K P ,K$) =fl_(K P ), 

det(I + H r K P Hj) 



(7) 



i?_(K P ) = log- 



det(I + H e K P Hj) 

is the achievable rate obtained by evaluating (|6]l for u = 
x ~ C]\f(0, Kp). This choice of p u ,Px\u thus maximizes ©. 
Furthermore note that 

det(I + H r K P Ht) 



Kp G arg max log ■ 



(8) 



Kpescp " det(I + H c K p H|) 

where the set Xp is defined in (01. Unlike the minimax 
problem (f2]i the maximization problem (© is not a convex 
optimization problem since the objective function is not 
a concave function of Kp. Even if one verifies that Kp 
satisfies the optimality conditions associated with (0), this 
will only establish that Kp is a locally optimal solution. 
The capacity expression (f2]) provides a convex reformulation 

'in the remainder of this paper, I denotes an identity matrix and 
denotes the matrix with all zeros. The dimensions of these matrices will be 
suppressed and will be clear from the context. Also we use the superscript 
' to denote the hermitian conjugate of a matrix. 



of ^ and establishes that Kp is a globally optimal solution 
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B. Structure of the optimal solution 

As we establish in Section HV-Dl if (Kp, K$) is a saddle 
point solution to the minimax problem, if S is any matrix 
that has a full column rank matrix and satisfies Kp = SS^ 
and if $ is the cross-covariance matrix between the noise 
random variables (c.f. then 



H C S = # T H r S. 



(9) 



The condition in (0 admits an intuitive interpretation. 
From (0]i <1> is a contraction matrix i.e., all its singular values 
are less than or equal to unity. The column space of S is the 
subspace in which the sender transmits information. So © 
states that no information is transmitted along any direction 
where the eavesdropper observes a stronger signal than the 
intended receiver. The effective channel of the eavesdropper, 
H e S, is a degraded version of the effective channel of the 
intended receiver, H r S. 

IV. Proof of TheoremQ] 

Our proof involves two main parts. First we show that 
the right hand side in (f2]i is an upper bound on the secrecy 
capacity. Then we examine the optimality conditions asso- 
ciated with the saddle point solution to establish Q, which 
completes the proof since 

C < i?+(K P ,K <E ,) = R-(K P ) < C. 

That the right hand side in (0 is an upper bound on the 
secrecy capacity has already been established: 

Lemma 1 ( [12], [13]): An upper bound on the secrecy 
capacity for the MIMOME channel is 



C< min max i? + (Kp,K$). 



(10) 



where UCp and are defined in © and (0]i respectively. 

Hence it suffices to establish (O, which we do in the 
remainder of this section. We divide the proof into several 
steps, which are outlined in Fig. [TJ 

A. Existence of the Saddle Point 

Our first step is to show that for the minimax problem 
in (0, a saddle point solution exists, i.e., there exists a point 
(Kp, K<j,) with Kp £ 3Cp and K$ £ such that for any 
Kp G 3Cp and K^. G we have that 

i?+(K P ,K $ ) < i? + (K P ,K$) < i?+(K P ,K*). (11) 

Towards this end, we show the following convexity prop- 
erties of the objective function. 

Claim 1: For any fixed Kp G 3Cp, the function 
i?+(Kp, K$) is convex in K*. For any fixed K^. G 3C#, 
the function i? + (Kp,K#) is concave in Kp. 



2 The 
maxKex 



"high SNR" 
, det(H r KH l ) 



dct(H c KHi) 

function in multivariate statistics and is well-studied; see, e.g 



case of this problem i.e., 
is known as the multiple-discriminant- 
[20]. 



Saddle Point: (K P ,K<s:>; 








Kp 6 arg max _R+(Kp, K$) 






> 




Kp G argmax/i(y r — ©y e ) 







^HrS = H C S => fl + (K P ,K 4 ) = R-(Kp) 



Fig. 1 . Key steps in the Proof of Theorem 1 . In section lTV-Al we establish that 
the minimax problem has a saddle point (Kp,K$) . Section |TV-B I obtains 
a condition satisfied by (Kp, K$) via the KKT conditions associated with 
the noise covariance, while section IIV-CI obtains another condition that 
(Kp, K<|,) satisfy, by first showing that Kp is also an optimal covariance 
of another MIMO channel. Combining these two conditions we show in 
Section |TV-D| that the upper and lower bounds coincide. 



Proof: Recall that i?+(K P ,K*) = 7(x;y r ,y ) - 
I(x;y c ), with x - 6^(0, K P ) and [zj z+]+ ~ 6^(0, K*). 
For the convexity in K#, note that, 7(x; y e ) does not depend 
on K*, and 7(x; y r , y c ) is known (see e.g., [21]) to be convex 
in K*. For the concavity in Kp, note that when K* >- 0, 
we can express 

i?+(K P ,K # ) =logdetA(K P ) -logdetK*, (12) 
where 



A(K P ) = I + H r K P Hj- 
(* + H r K P Ht)(I + HeKpHt)" 1 ^ 



H K P H 



is the Schur compliment of the matrix 



I 



H r K P Hj 
t- H KpHt 



I 



H r K P Ht 

H c KpHj 



(13) 



(14) 



Since the Schur complement is jointly concave in the con- 
stituent matrices [22, page 21, Corollary 1.5.3], which in 
turn are linear in Kp, it follows that A(Kp) is concave in 
Kp and hence from the composition theorem we have that 
i?+(Kp,K#) is concaved m Kp. The case when K$ is 
singular, can be handled via the singular value decomposition 
of €>, and will be treated in the full paper. ■ 

Notice that both the domain sets 3Cp and DC* are convex 
and compact, hence the existence of a saddle point solution 
(Kp,K$) is established via the minimax theorem [23]. 

In the sequel, we define <& via 



(15) 



3 The concavitiy result can also be established via [25, pg. 506, Theorem 
16.9.1], by observing that I + H e KpHj is a minor of the matrix in (141 . 



B. Least favorable noise condition 
From (TTTb . we have that 

K$ G arg min i? + (Kp,K#). 



(16) 



The optimality conditions associated with (fT6b yield the 
following. 

Lemma 2: Suppose that (Kp, K$) is a saddle point solu- 
tion to the minimax problem in (0. Then 

(H r ©H c )Kp($ t H, H e )* = 0. (17) 

where <I> is as defined via (IT~5b and 

© = (H r KpHt+#)(I + H c K P Ht)- 1 . (18) 

We will see subsequently, that ( fTTI ) has a useful structure, 
which can be combined with the optimality condition as- 
sociated with Kp. The proof is most direct when the noise 
covariance K$ at the saddle point is non-singular. Hence we 
will establish $1% in this special case first and then consider 
the case when K$ is singular. 

1) K$ is non-singular: The Lagrangian associated with 
the minimization ( fTol i is 

£#(K # , T) = R+(K P , K*) + tr(TK»), (19) 

where the dual variable 



Ti 
Y 2 



(20) 



is a block diagonal matrix corresponding to the constraint 
that the noise covariance K$ must have identity matrices 
on its diagonal. The associated Karush-Kuhn-Tucker (KKT) 
conditions yield 



where 

V K *i?+(K P ,K*)| R 



T = 0, 



(21) 



logdet(K # +H t K P Hl)-logdct(K*) 



t\-i 



= (K$+H t K P H u 
with the convenient notation 

H t = 



K 



H r 



which in turn implies that 

H t K P Hj = K$Y(K$ 



H t KpH{). 



(22) 



(23) 



(24) 



The relation in (fTTI i follows from (l24l through a straightfor- 
ward computation that exploits the block diagonal structure 
of Y, which we provide in Appendix [Q 



2) K$ is singular: When the noise covariance K$ is 
singular, as we now show, ( l24t still holds. Note that this 
will complete the proof, since the steps in Appendix U that 
simplify (l24l do not require that K$ be non-singular. 

In the singular case we define another optimization prob- 
lem whose optimality conditions yield (124-b . An analogous 
approach has been taken earlier by Yu [4] for dealing with 
singular noise for the MIMO broadcast channel. 

Suppose that 

K 4> =WnW t , (25) 

where W is a matrix with orthogonal columns, i.e., W^W = 
I and Cl is a non-singular matrix. We first note that it must 
also be the case that 



H t = WG, 



(26) 



i.e., the column space of H t is a subspace of the column 
space of W. If this were not the case, by receiving a signal 
in the null space of W, one can obtain arbitrarily high rate, 
i.e., 

max R + (Kp, K$) = oo, (27) 

which contradicts that K<j> is a saddle point solution. 

Now observe that ft in d25l l is a solution to the following 
minimization problem, 



min Rq(H), 
Rn(n)=\og 



3Ca = 



det(GK P G t +n) 



det(fl) 



(28) 





wnw f = 










,) 









(30) 



Indeed Q is a feasible point for d28l l. Also with zq ~ 
CN(0, 0), one can show that 

R n (n) = i? + (K P) WfiWt) +logdet(I + H K P H|), 

(29) 

from which the optimality of Cl readily follows. The optimal- 
ity conditions associated with the minimization problem 
give 

n 1 - (GK P G t + ny 1 = W'TW, 

GK P G f = nW f YW(n + GK P G f ) 

where T has the block diagonal form in ( f20l > . Multiplying the 
left and right and side of ( f30b with W and respectively 
and using (EB! and (l26l i we have that 

H t KpHl = K $ Y(K $ + H t KpHj), (31) 

which coincides with d24i i. 

C. Optimal Input Covariance Property 

Given that (Kp,K$) is a saddle point solution in <J2J we 
have from (fTTT i that 

K P e arg max R + (K P , K* ) . (32) 

K P e:Kp 

We show that d32l in turn implies the following property. 



Lemma 3: Suppose that Kp = SS^, where S has a full 
column rank. Then provided (H r — ©H ) ^ 0, the matrix 



M = (H r ©H C )S 



(33) 



has a full column rank, where and are defined via (fT~5T > 
and ( fT8l . respectively. 

The rest of this subsection is devoted to the proof of 
Lemma [3] and accordingly we assume that the saddle point 
solution (Kp,K$) satisfies (H r — 0H O ) ^ 0. As with 
Lemma 12 the proof is most direct when K$ is non-singular. 
Hence we will treat this case first and consider the case when 
K$ is singular subsequently. 

1) K$ is non-singular: In this case, we can write the 
optimality condition d32l as 

Kp G arg max i? + (Kp , K$) 

= argmax/i(y r | y c ) 

K P G3Cp 

= argmax h (y r - 8(K P )y ) , (34) 

KpGDCp 

where 9(K P ) = (H r K P H| + *)(H c KpHt + 1)" 1 is the 
linear minimum mean squared estimation coefficient of y r 
given y e . Instead of directly working with the optimality 
conditions associated with (l34l we reformulate the problem 
as below. 

Claim 2: Suppose that K$ >- and define 

M(Kp) 4 h(y t - ©y c ) = logdet(r(K P )), (35) 
where 

r(K P ) = 1 + &@ f ©* f *0 f + 

(H t ©H c )K P (H r -0H c )t. (36) 

Then, 

K P e arg max M(K P ) . (37) 

K P G3Cp 

Remark 1: The objective function in ( f37T > is similar to the 
one in (l34l . but with fixed, i.e., the variables © and Kp 
are decoupled in (f3Tb . This key step enables us to work with 
the simpler objective function in (|37T i and complete the proof. 

Proof: To establish (T37T > note that since JC(-) is a 
concave function in Kp S OCp and differentiable over 3Cp, 
the optimality conditions associated with the Lagrangian 

£ e (K P , A, *) = 5C(Kp) + tr(¥K P ) - A(tr(K P ) - P), 

(38) 

are both necessary and sufficient. Thus Kp is an optimal 
solution to (T37T > if and only if there exists a A > and 
* >~ such that 



(H r - 0H o ) t [r(Kp)]- 1 (H r - ©H c ) + * = AI, 
tr(*K P ) = 0, A(tr(K P ) - P) = 0, 



(39) 



where T( ) is defined in (1361 1. These parameters for Kp are 
obtained from the optimality conditions associated with d32l . 



Since i?+(Kp,K$) is differentiable at each Kp G 3Cp 
whenever K$ >- 0, Kp satisfies the associated KKT condi- 
tions — there exists a Ao > and \& h such that 



V Kp -R(Kp,K $ ) 



*n = AnI 



(40) 



A (tr(K P )-P)=0, tr(* o K P ) = 0. 
We show in Appendix UT1 that 

V Kp i?(Kp,K $ ) _ =(H r -0H c ) t [A(Kp)]- 1 (H r -0H e ), 

Kp 

(41) 

where A(-), defined in (1131 1. satisfies satisfies^ A(Kp) = 
r(Kp). Hence the first condition in (l40b reduces to 

(H r - 0H o ) t [r(Kp)]- 1 (H r - ©H c ) + * = A I. (42) 

Comparing (l40l and (l42l with ( 1391 . we note that 
(Kp,Ao,$o) satisfy the conditions in fl39l l, thus establish- 
ing 03. ■ 

Claim 3: Suppose that K$ y and Kp be any optimal 
solution to 

K P e axgmaxJC(Kp). (43) 

Suppose that Sp is a matrix with a full column rank such 
that 



K P = S P S 



p3p 



(44) 



then (H r — 0H o )Sp has a full column rank. 

Note that the claim in Lemma [3] follows from Claim [2] and 

Claim [3] It remains to prove Claim [3] 

Proof: The proof is based on the so called water-filling 
principle [25]. From d43l . we have 

K P = 

arg max log det (I + J - a (H r - 0H O ) K P (H r - 0H C ) f J" * ) , 

K P G3Cp 

(45) 

where J = I + 00 f ©* f *0 f y 0, i.e., K P is an 
optimal input covariance for a MIMO channel with white 
noise and matrix H c ff = J~2(H r — 0H C ). We can now 
consider the usual water-filling properties associated with 
Kp to establish that (H r — 0H c )Sp has a full column rank. 

Let rank(H c ff) = v and let us denote the non-zero 
singular values (in non-increasing order) by a%, a^, . . . , u v . 
Let S = diag(cri, . . . , a v ), and 



S = 



v nt—v 

S 




be such that 



H cff = ASBt = AiSoBj, 



(46) 



(47) 



4 To verify this relation, note that T(Kp) is the variance of y r — ®y c - 
When Kp = Kp, note that ©y c is the MMSE estimate of y r given y c 
and T(Kp) is the associated MMSE estimation error. 



is the singular value decomposition of H c ff where A and B 



are unitary matrices in C 

v n-r — v 

[ Ai A 2 



and C ntXnt and 



B 



[Br 



nt—v 

B 2 



A = 

From d45l ) we have that 

Kp e arg max log det (I + H c ffKpH^ ff ) 



(48) 



1.K }■ 



arg max log det (I + ASB^pBS^ 1 ) 

DC p 



arg max log det (I + B T K P BS f S 



(49) 



IK i 



Since B is unitary, we have that B^KpB G %p and hence 
it follows from d49l that 

F = B f KpB G argmaxlogdet(I + K P S f S). (50) 

We now show that any such F is diagonal and Fa = for 
i > v. From the Hadamard inequality [25, Section 16.8], we 
have that 

it V 

logdet(I+FStS)<^log(l+F Jl( T2) = ^log(l+F l4 a l 2 ), 

i=l i=l 

(51) 

with equality if and only if the matrix FS^S is a diagonal 
matrix. We now show that any optimal F in d50t has the 
form 

F 




(52) 



where Fo is a diagonal matrix. Clearly any optimal F attains 
the upper bound in (IBTT l. hence it follows that (1) Yli=i = 
P, and F tl = for i > v and (2) FS^S is a diagonal 
matrix. The first condition, together with the fact that F y 
imples that the lower diagonal matrix in d52l ) is zero, while 
the second condition implies that the off-diagonal matrices 
in ( f52b are zero and that Fq is diagonal. 
From ( TSUl l. we have that 



K P = BFB t = BiF B{ 



(53) 



and hence for any Sp that has a full column rank and 
satisfies (l44l . we have 

col(Sp) C col(Bi) = Null- L (H ef f) = Null 1 " (H r - ©H c ), 

which implies that (H r — 0H o )Sp has a full column rank. 

■ 

2) K$ is singular: The case when K$ is singular can 
be handled by considering an appropriately reduced channel 
matrix. In this case $ has d > 1 singular values equal to 
unity and hence we can express its SVD as 



* = [Ui U a ] 



I 







[vll 





A 




yL 



(54) 



where cr max (A) < 1. 

First we obtain some conditions that are satisfied when the 
saddle point noise covariance is singular. 



Claim 4: Suppose that (Kp,K$) is a saddle point solu- 
tion to the minimax problem in (O and the singular value 
decomposition of <& is given as in ( 154-b . Then we have that 



(55a) 
(55b) 



R+(K P , K») = /(x; U 2 y r | y e ), VK P e 3C P . (55c) 



Proof: To establish d55al) . we simply note that 

E[utz r ztVi] =U t 1 *V 1 =1, 

i.e., the Gaussian random variables Tj{z r and V|z c are 
perfectly correlated. Next note that 

i?+(K P ,K 4 ,) =/(x;y r |y c ) 

= /(x;U t 1 y r ,U t 2 y r |y c ) 

= /(x;Uty r ,U t 1 y r -Vly e |y e ) 

= /(x;l4y r ,utH r x - VlH e x|y e ). 

Since K$ is a saddle point solution, we must have 
maxKp fl+(Kp,K$) < oo and hence u{H r = v{H c , 
and i? + (K P ,K$) = 7(x;U 2 y r | y c ), establishing (|55bl i 
and d55ct. ■ 



(56) 



Thus with H r = U^Hr, and z r = Ujzr and 
y, = U 2 y r = H r x + z r , 



we have from ( I55cb . that 

K P e axgmax/(x;y r | y e ). 



(57) 



Since * = S[z r z|] -< I, it follows from $57$ and Claim [2] 
that 

Kp 6 argmax5{(Kp) (58) 

'K p 

where 

ft(K P ) = - ©y e ), 

= UJ(H r K P Ht + *)(I + HeKpHj)- 1 . 

Along the lines of Claim [3] we then have that 

(H r - 0H c )S = U 2 (H r - 0H c )S 

has a full column rank, which in turn establishes that (H r — 
0H c )S has a full column rank. 

D. Saddle Value 

We use the results from Lemma [2] and Lemma [3] to 
establish (0. To invoke Lemma [3] we will first assume that 
the saddle point solution (Kp, K$) is such that H, -0H c / 
and treat the case H r — 0H O = subsequently. Note that 
from Lemma |2] we have that 



(59) 



(H r - 0He)SSt(* f H r - H e ) t = 0, 

and since M = (H r — 0H o )S has a full column rank, 
reduces to 

* f H r S = H C S. (60) 



The difference between the upper and lower bounds is 
given by 

AR = R + (K P , K$) - i?_(Kp) 

= ^(x; y r I y c ) - [I(x; y r ) - J(x; y e )] 

= /(x;y e |y r ). (61) 

If K$ y 0, then 7(x;y c | y r ) = h(y c | y r ) - h(z c | z r ) 
and 

Hy c I y r ) 

= logdet(I + H c K P Ht- 

(H c KpHt + * f )(H r K P Ht + I)- x (H r KpHt + *)) 
= logdet(I + H c KpHt - * f (H r K P Hj + I)*) 



(62) 



logdet(I-* T *) = / l (z c |z r ), 



where we have used the relation (f60t in simplifying 
This shows that the difference AR in (|6TT > is zero, thus 
establishing (O whenever K$ is non-singular. 

To establish the result when K$ is singular, note that from 
d55al and d55bl in Claim gj 



(63) 



AR = I(x;y e | y r ), 
= /(x;V5y e |y,), 
which is zero as shown below. 

MV 2 y c I y r ) 

= logdet(I + V|H c K P HjV 2 - (vjH e K P Hj + A f U 2 ) 
(I + H.KpH^-^H.KpHtVa + U 2 A)) (64) 

= logdet(I + A 1 "U^H r KpHjU 2 A 

- AtU 2 (I + H r K P Hj)U 2 A) 

= logdet(I- A f A) 

= h(v\z c | U 2 z r ) = h(V\z c | z r ), (65) 

where we have used from (l60l that 

V^^HrS = V 2 H C S => A f U 2 H r S = v|H c S, 

in simplifying (l64l and the equality in d65T l follows from 
the fact that U|z r is independent of (TjJz^Vjze). This 
establishes (O when K$ is singular. 

It remains to consider the case when the saddle point 
solution (Kp,K$) is such that 



©H c = H r . 



(66) 



In this case, we show that the saddle value and hence the 
capacity is zero. From C[8]l, © = (<& + H r K P H|)(I + 
H c KpHj) _1 , hence we have 



© + 0H c K P Hj = * + H r KpHj. 



(67) 



Substituting (l66l l in d67l i. we have that 3» = ©, and using 
this relation it can be verified that i?_|_(Kp, K$) = 0. This 
completes the proof of Theorem Q] 



V. Zero-Capacity Condition and Scaling Laws 

The conditions on H r and H c for which the secrecy 
capacity is zero have a simple form. 

Lemma 4: The secrecy capacity of the MIMOME channel 
is zero if and only if 

|H r v| 



0-max(H r ,H c ) = SUp 

v£C"t 11-H-cV 



< 1. 



(68) 



We omit the proof of this condition due to space constraints. 
The quantity cr max (H r ,H ) is the largest generalized singu- 
lar value of the channel matrices [26]. Analysis of the zero- 
capacity condition in the limit of large number of antennas 
provides several useful insights we develop below. 

For our analysis, we use the following convergence prop- 
erty of the largest generalized singular value for Gaussian 
matrices. 

Fact 1 ( [27], [28]): Suppose that H r and H c have i.i.d. 
CN(0, 1) entries. Let ?i r ,n c ,7i t — > oo, while keeping 
n T /n e = 7 and n t /n c = 8 fixed. If 8 < 1, then the largest 
generalized singular value of (H r , H c ) converges almost 
surely to 



(H r ,H e ) 



1-/3 



(69) 



By combining Lemma H and Fact Q] one can deduce the 
following condition for the zero-capacity condition. 

Corollary 1: Suppose that H r and H c have i.i.d. CN(Q, 1) 
entries. Suppose that n r ,n e ,nt — > oo, while keeping 
n r /n e = 7 and n t /n c = (3 fixed. The secrecy capacit)|f| 
C(H r , H e ) converges almost surely to zero if and only if 
< (3 < 1/2, < 7 < 1, and 



7 <(1- V / W- 



(70) 



Figs. [2] and [3] provide further insight into the asymptotic 
analysis for the capacity achieving scheme. In Fig. [2] we 
show the values of (/?, 7) where the secrecy rate is zero. 
If the eavesdropper increases its antennas at a sufficiently 
high rate so that the point (8, 7) lies below the solid 
curve, then secrecy capacity is zero. The MISOME case 
corresponds to the vertical intercept of this plot. The secrecy 
capacity is zero, if /3 < 1/2, i.e., the eavesdropper has 
at least twice the number of antennas as the sender. The 
single transmit antenna (SIMOME) case corresponds to the 
horizontal intercept. In this case the secrecy capacity is zero 
if 7 < 1> i.e., the eavesdropper has more antennas than the 
receiver. 

In Fig. |3] we consider the scenario where a total of 
T 3> 1 antennas are divided between the sender and the 
receiver. The horizontal axis plots the ratio n T /nu while the 

5 We assume that the channels are sampled once, then stay fixed for the 
entire period of transmission, and are revealed to all the terminals. 



vertical axis plots the minimum number of antennas at the 
eavesdropper (normalized by T) for the secrecy capacity to 
be zero. We note that the optimal allocation of antennas, that 
maximizes the number of eavesdropper antennas happens 
at n r /n t = 1/2. This can be explicitly obtained from the 
following minimization 

minimize 8 + 7 

(71) 

subject to, 7 > (1 - \fW) 2 i P > 0, 7 > 0. 
The optimal solution can be easily verified to be 
(/3*,7*) = (2/9,1/9). In this case, the eavesdropper needs 
w 3T antennas for the secrecy capacity to be zero. We 
remark that the objective function in (|7T1 is not sensitive to 
variations in the optimal solution. If fact even if we allocate 
equal number of antennas to the sender and the receiver, the 



(3+2V2) 



T w 2.9142 x T antennas for 



eavesdropper needs 
the secrecy capacity to be zero. 
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Appendix I 
Least Favorable Noise Property 

Substituting for K$ and H t in d24l and carrying out the 
block matrix multiplication gives 

H r K P Hj = Ti(I + H r K P Hj) + *T 2 (* f + H c K P Hj) 

H r K P Ht = Ti(* + H r K P Ht) + *Y 2 (I + H e K P H|) 

H e KpHj = * f Ti(I + H r KpHj) + T 2 (* f + H c K P Hj) 

H c K P Ht = * f Y!(* + H r K P Ht) + Y 2 (I + H c K P H,t). 

(72) 

Eliminating Yi from the first and third equation above, 
we have 

- H c )K P Hj = (* f * - I)Y 2 (# f + H K P H+). 

(73) 

Similarly eliminating Yi from the second and fourth equa- 
tions in ( 1721 we have 

(^H.-He^pHt = (* t *-I)Y 2 (I + H c K P Hl;). (74) 

Finally, eliminating Y 2 from d73l and d74l we obtain dT7b . 

Appendix II 
KKT Condition 

First note that, 
V K p#+(Kp,K $ ) 

= Hj(H t K P Hj + K^)- 1 ^ - Ht(I + H KpHj) _1 H e . 



Substituting for H t and K$ from ( 1231 and ( TOI l. 

(K* +H t K P H t t )- 1 

I + H r K P H r t * + H r KpHj] 
* t + H r K P Ht I + H c K P Ht 



A 1 -A 1 © 

G^A 1 (I+HcKpHo)- 1 -!-©^ _1 



(75) 



Fig. 2. Zero-capacity condition in the (/3, 7) plane. The capacity is zero for any 
point below the curve, i.e., the eavesdropper has sufficiently many antennas to 
get non-vanishing fraction of the message, even when the sender and receiver 
fully exploit the knowledge of H e . 



Fig. 3. The minimum number of eavesdropping antennas per sender plus 
receiver antenna for the secrecy capacity to be zero, plotted as a function 

of n T /nt. 



where we have used the matrix inversion lemma (e.g., [29]), 
and A = A(Kp) is defined in ( fT3] l, and is as defined 
in ( fT8l ). Substituting into d75l l and simplifying gives 



V Kp i?+(Kp,K$) 



K, 



=Hj(K$ + HtKpHj)- 1 ^ - Ht(I + H C K P H ) _1 H C 
= (H r - eH^lAfKp)]- 1 ^ - 0H O ) 

as required. 
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